Microsoft Microsoft Lync
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-1084 | 2013 Service Pack 1 (32-bit) ; 2013 Service Pack 1 (64-bit) | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. | MEDIUM 6.5 | 5.3 % | ||
| CVE-2018-8546 | 2013 Service Pack 1 (32-bit) ; 2013 Service Pack 1 (64-bit) ; Basic 2013 Service Pack 1 (32-bit) ; … | A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This aff | MEDIUM 5.9 | 5.5 % | ||
| CVE-2018-8474 | Mac 2011 | A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for M | HIGH 7.5 | 38 % | ||
| CVE-2018-8311 | 2013 Service Pack 1 (32-bit) ; 2013 Service Pack 1 (64-bit) | A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted | HIGH 8.8 | 17 % | ||
| CVE-2018-8238 | 2013 Service Pack 1 (32-bit) ; 2013 Service Pack 1 (64-bit) | A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka | HIGH 7.8 | 6.0 % |